$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/dc4b07de-971f-380d-8210-c351918b260b.roa File: dc4b07de-971f-380d-8210-c351918b260b.roa (raw, json) Hash identifier: nIV7F+J5s0e1zZMt6DHulqEYfR6vVxNQTM4L4gY/pds= Subject key identifier: E7:3C:B3:51:A1:D1:33:99:76:36:78:7E:3B:E5:64:E9:9E:8A:86:F5 Certificate issuer: /CN=f5f2c804-b3b9-4b56-a719-dd72262a7a6d Certificate serial: 010D0C9F4328584B48E1BFD08A29933EB03C4E80 Authority key identifier: C4:60:1F:97:B9:F6:89:F4:CF:39:BD:79:3F:D8:3D:23:75:EC:42:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/dc4b07de-971f-380d-8210-c351918b260b.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 26512 IP address blocks: 199.119.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e1:bf:d0:8a:29:93:3e:b0:3c:4e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f5f2c804-b3b9-4b56-a719-dd72262a7a6d Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=dacb7081-25ce-44b0-90d4-57b555183657 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:a8:9b:63:a5:ba:d0:1f:bc:46:43:7b:17:0d: eb:4b:ba:76:ec:8b:21:aa:04:9d:fe:a5:ec:7e:3d: 3e:31:aa:f4:d5:2b:74:9e:11:be:31:cc:bb:97:5e: 11:2f:66:80:f0:38:24:08:09:dd:63:b0:5f:ac:87: 01:4f:c6:f1:77:d4:52:81:e9:e5:ec:57:a2:9b:7f: 37:be:d7:a5:f0:31:bd:ea:28:5b:53:86:db:84:d2: db:e7:48:6d:e7:75:67:9b:55:fe:cc:06:df:e3:4a: 4f:7d:50:b7:48:6d:42:5d:30:fa:ba:53:aa:3b:cb: 00:d9:9a:52:56:f7:6a:a7:d3:aa:9b:9c:b1:56:e4: 9c:97:a2:2a:07:6d:0d:a2:26:a2:52:22:3a:4a:e3: 96:56:28:2f:5b:82:c3:09:54:aa:da:ad:c6:57:d7: 67:92:21:2f:67:ba:c4:ac:d1:11:6b:25:69:6a:18: 34:ef:d9:2a:6a:a8:e7:df:79:f8:be:91:56:ee:e2: a0:00:a4:72:d0:b2:d0:ec:a5:15:d8:55:cf:6b:4a: 1c:42:f0:d4:43:02:ed:03:eb:8f:fe:5f:49:4f:b4: d8:3a:eb:60:88:af:6f:67:a9:6f:a8:2c:64:f1:88: 2e:6e:6f:d3:40:63:38:b2:d1:d8:1a:86:72:3a:5e: 57:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:3C:B3:51:A1:D1:33:99:76:36:78:7E:3B:E5:64:E9:9E:8A:86:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/dc4b07de-971f-380d-8210-c351918b260b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.crl X509v3 Authority Key Identifier: keyid:C4:60:1F:97:B9:F6:89:F4:CF:39:BD:79:3F:D8:3D:23:75:EC:42:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.cer sbgp-ipAddrBlock: critical IPv4: 199.119.132.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:ed:76:26:c8:26:fd:fa:36:36:1b:f7:ad:43:29:55:da:b5: 2e:3f:fd:af:11:56:d8:d9:94:8d:7b:a5:10:53:0d:eb:5b:90: 72:49:21:3a:9a:4f:a8:69:87:81:17:fc:fc:62:4f:54:cc:e4: d1:8f:bd:e4:85:7d:7f:9b:b7:2d:a7:5e:2e:ce:4c:43:40:88: ae:6b:f4:a2:98:b4:09:08:5b:c4:4c:d7:87:73:8d:0b:2b:c4: 71:11:5e:92:73:31:f4:89:29:8e:19:d8:2f:bb:7c:c1:07:29: 3e:7a:2d:2c:87:2a:9d:e3:b7:7f:30:7f:f6:80:c8:73:cf:ee: 2f:28:6c:c4:e0:60:b3:33:ca:dc:cd:be:f6:ab:e3:70:65:34: 2c:8f:1b:ba:fa:41:97:17:77:71:ad:2b:05:93:48:34:b9:97: e5:95:5b:2a:b1:5d:e8:24:df:56:33:ba:de:bc:c1:64:7c:ad: 1f:97:0f:84:78:2f:7e:cf:ec:89:73:fd:7e:5d:8f:31:5a:65: c9:d7:ec:ad:88:cb:54:fb:3a:7d:99:db:01:7f:e2:e6:f3:ea: 9a:4b:19:a4:0f:23:4f:ec:89:50:be:f3:39:56:44:2d:d0:e0: c8:8a:77:80:e9:f7:df:8d:5e:85:88:3d:e9:7e:dc:a2:ab:bf: 56:55:2b:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtI4b/QiimTPrA8ToAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjVmMmM4MDQtYjNiOS00YjU2LWE3MTktZGQ3MjI2MmE3 YTZkMB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk ZGFjYjcwODEtMjVjZS00NGIwLTkwZDQtNTdiNTU1MTgzNjU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApaibY6W60B+8RkN7Fw3rS7p27IshqgSd/qXs fj0+Mar01St0nhG+Mcy7l14RL2aA8DgkCAndY7BfrIcBT8bxd9RSgenl7Feim383 vtel8DG96ihbU4bbhNLb50ht53Vnm1X+zAbf40pPfVC3SG1CXTD6ulOqO8sA2ZpS Vvdqp9Oqm5yxVuScl6IqB20NoiaiUiI6SuOWVigvW4LDCVSq2q3GV9dnkiEvZ7rE rNERayVpahg079kqaqjn33n4vpFW7uKgAKRy0LLQ7KUV2FXPa0ocQvDUQwLtA+uP /l9JT7TYOutgiK9vZ6lvqCxk8Ygubm/TQGM4stHYGoZyOl5XlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOc8s1Gh0TOZdjZ4fjvlZOmeiob1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9mNWYy YzgwNC1iM2I5LTRiNTYtYTcxOS1kZDcyMjYyYTdhNmQvZGM0YjA3ZGUtOTcxZi0z ODBkLTgyMTAtYzM1MTkxOGIyNjBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZjVmMmM4MDQtYjNiOS00YjU2LWE3 MTktZGQ3MjI2MmE3YTZkL2Y1ZjJjODA0LWIzYjktNGI1Ni1hNzE5LWRkNzIyNjJh N2E2ZC5jcmwwHwYDVR0jBBgwFoAUxGAfl7n2ifTPOb15P9g9I3XsQiEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9mNWYyYzgwNC1iM2I5LTRiNTYtYTcxOS1kZDcy MjYyYTdhNmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx3eEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIHtdibIJv36NjYb961DKVXatS4//a8RVtjZlI17pRBTDetbkHJJITqa T6hph4EX/PxiT1TM5NGPveSFfX+bty2nXi7OTENAiK5r9KKYtAkIW8RM14dzjQsr xHERXpJzMfSJKY4Z2C+7fMEHKT56LSyHKp3jt38wf/aAyHPP7i8obMTgYLMzytzN vvar43BlNCyPG7r6QZcXd3GtKwWTSDS5l+WVWyqxXegk31Yzut68wWR8rR+XD4R4 L37P7Ilz/X5djzFaZcnX7K2Iy1T7On2Z2wF/4ubz6ppLGaQPI0/siVC+8zlWRC3Q 4MiKd4Dp99+NXoWIPel+3KKrv1ZVK3k= -----END CERTIFICATE-----Generated at Wed Nov 5 09:50:46 2025 by rpki-client